added x_auth_token to request